Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa
File:                     aed4a863-c00d-3e4c-9890-937bf129bb9e.roa (raw, json)
Hash identifier:          3t5ARflMu1ATnz8CHT000KwPUJtEYaaGCcu2hheatqM=
Subject key identifier:   41:A8:0C:18:24:F7:8C:08:95:44:49:CA:FC:5C:F9:CD:64:C4:40:B4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CC789FCD424B0CF6B183A6680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa
Signing time:             Sat 07 Feb 2026 02:38:32 +0000
ROA not before:           Sat 07 Feb 2026 02:38:32 +0000
ROA not after:            Fri 08 May 2026 01:38:32 +0000
asID:                     396982
IP address blocks:        208.76.71.192/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:89:fc:d4:24:b0:cf:6b:18:3a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  7 02:38:32 2026 GMT
            Not After : May  8 01:38:32 2026 GMT
        Subject: CN=6dff6daf-4f03-4c75-9356-d4b7e3a7a117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:a9:e0:bc:3d:67:7e:c8:e4:3d:fa:cb:7e:
                    38:92:aa:ff:e3:33:ba:fa:30:83:60:fb:b2:cd:43:
                    1d:73:d5:fa:d1:e2:e0:60:c4:8e:68:f9:07:90:20:
                    a9:3c:c2:e2:17:3d:d3:d6:f0:3e:68:ed:07:c5:e6:
                    84:4b:d6:de:7d:ea:d9:b3:dd:66:92:a2:50:ae:84:
                    14:c7:a9:4e:0d:1c:fc:51:55:70:a5:50:a0:ac:74:
                    97:e2:bf:8f:c9:ce:c9:3d:ce:cd:c4:0b:85:58:72:
                    ec:c4:e3:7c:81:6b:a3:16:76:cc:e2:0c:01:e4:73:
                    d8:7e:64:7b:56:b7:71:17:61:d3:b8:da:08:66:47:
                    8b:17:f1:95:ea:bc:a1:59:a4:9a:41:be:ea:23:03:
                    6a:45:bd:7a:f0:f0:1e:7c:0b:eb:f5:46:53:0b:ba:
                    6a:03:33:d9:ac:d4:3f:e6:96:ba:e2:ac:f5:59:6d:
                    90:b1:a8:b7:15:16:dc:ef:ae:e9:bf:34:d0:b9:4e:
                    01:fa:01:1e:b2:65:4d:f2:ed:d2:b0:82:b5:04:a1:
                    ae:5f:66:4b:b5:f4:f8:de:36:d5:3d:d9:26:73:30:
                    0a:73:cc:64:f2:65:f5:af:ea:35:e4:50:bd:e6:06:
                    5d:56:d0:a1:6a:1d:6a:6d:b0:4d:97:80:75:e2:23:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A8:0C:18:24:F7:8C:08:95:44:49:CA:FC:5C:F9:CD:64:C4:40:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.192/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:38:73:8f:d1:20:2b:05:e4:04:cf:e5:d9:4c:55:f7:da:1e:
         7e:dd:66:07:a8:ed:32:44:ab:de:c4:43:ef:2f:5c:96:d4:ab:
         1d:93:8e:29:0a:76:d8:82:8c:13:78:03:88:16:7e:4e:fa:57:
         ed:99:e1:2b:f0:ba:2f:c7:f5:ed:50:d6:5f:28:ef:8b:ac:a5:
         c2:f8:a2:4a:da:6e:b7:f4:32:e6:ae:5e:89:b4:d4:57:bb:cb:
         cf:fc:5e:d1:cf:44:8e:9a:a4:49:de:08:91:14:38:78:58:05:
         b6:c1:d3:2b:15:de:06:4e:93:c0:d3:bd:0d:1f:37:9c:be:42:
         0b:63:3e:6a:e8:cd:fd:d6:9a:b4:9b:1c:02:ca:cd:43:c1:80:
         79:d9:58:13:01:ce:5b:fc:e9:73:cf:c4:13:f5:64:2b:06:55:
         c5:00:e3:96:bb:b9:9d:5e:1f:26:ef:07:fa:8f:c4:e1:af:30:
         2d:79:46:04:a4:9d:77:87:80:cd:9d:4b:8c:14:64:b6:e4:c9:
         bb:9c:d7:b9:67:ea:43:94:77:b3:73:d0:a1:d9:a1:6b:cb:43:
         c2:02:e3:ed:47:0e:45:50:ee:70:85:69:c4:d0:28:2e:63:c9:
         a6:3a:bf:f8:08:ef:b5:15:66:53:96:74:b7:6f:85:52:48:cb:
         17:63:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:00:52 2026 by rpki-client